"The Foreign Ministry's Affiliated Agency Didn't Know It Had Been Hacked for 9 Months"... Raising Fears of Personal Data Leaks Like Coupang

[Financial News] It was belatedly confirmed that the Korea National Diplomatic Academy (KNDA), an agency under the Ministry of Foreign Affairs, had been hacked for as long as nine months, leaving it exposed to a serious risk of personal data leaks.
According to the Ministry of Foreign Affairs on the 20th, an unidentified attacker exploited an undisclosed security flaw in server software, known as a zero-day vulnerability, as well as weaknesses in system security settings to take control of the server between April and May last year. The attacker then used that access until February this year.
A ministry official said, "After being notified by a related agency in early February this year of signs of abnormal access to the KNDA online education system, we immediately blocked the system and have been investigating it together with the relevant authorities. " However, the ministry did not disclose details such as the scale of any personal data leak.
The hacked online education system stores training videos and information needed to run the program, including the names and IDs of trainees. The ministry said it is currently difficult to identify what information may have been leaked.
As a result, investigators are expected to conduct a more detailed probe into whether personal data was leaked and whether the ministry's response was appropriate. The ministry has previously stressed that Coupang's personal data leak case, which escalated into a diplomatic dispute between South Korea and the United States, should be handled strictly according to the law, drawing attention to how authorities will respond in this case.
The ministry explained, "The attacker exploited a zero-day vulnerability that even the software vendor had not recognized at the time, then used legitimate software privileges after gaining access.
" It added, "It was difficult to detect through ordinary methods, and there was no security update available at the time to address the issue, which limited our response.
" The ministry said it will continue to strengthen internal security systems and management measures in cooperation with the relevant authorities.The Ministry of Foreign Affairs building at the annex of Government Complex Seoul in Jongno District, Seoul." The ministry said it will continue to strengthen internal security systems and management measures in cooperation with the relevant authorities." The ministry said it will continue to strengthen internal security systems and management measures in cooperation with the relevant authorities." The ministry said it will continue to strengthen internal security systems and management measures in cooperation with the relevant authorities.
[email protected] Kim Kyung-soo Reporter